language: en · last checked: 2026-10-08

North Dakota — protection of student data; school district policy (N.D.C.C. §15.1-07-25.3)

North Dakota's student-data provision. It binds the school board, not the vendor, but it is the gate a vendor passes through: the board's policy must require the board's permission before student data is shared with anyone who is not a district employee or with any other entity, and the superintendent must keep a list of every individual and entity student data is shared with.

N.D.C.C. §15.1-07-25.3. Protection of student data - School district policy

Verbatim from North Dakota Legislative Council, N.D.C.C. chapter 15.1-07 (PDF) — 15.1-07-25.3, fetched live; see Meta.

• a. Require that permission be obtained from the board before student data is shared with an individual who is not a school district employee or any other entity. This provision does not apply to sharing data with a student's parent or as otherwise authorized by law.
• b. Permit a school district to share student data with the state entity managing a student information system if the school district and the state entity have entered a data sharing agreement, subject to federal and state privacy laws. The data sharing agreement must include a clause that designates the department as an authorized representative of the school district under the Family Educational Rights and Privacy Act of 1974 [20 U.S.C. 1232G] and title 34 Code of Federal Regulations part 99 for purposes of the statewide longitudinal data system.

• a. A list of individuals with whom and entities with which student data is shared; and
• b. A list, by title, of school district personnel who have access to student data.